Merge branch 'master' of https://github.com/MicrosoftDocs/azure-docs-pr into work-auth-links

Author: Heidilohr

articles/active-directory/conditional-access/concept-condition-filters-for-devices.md

@@ -4,7 +4,7 @@ description: Use filter for devices in Conditional Access to enhance security po
 ms.service: active-directory
 ms.subservice: conditional-access
 ms.topic: conceptual
-ms.date: 11/08/2021
+ms.date: 12/03/2021
 
 ms.author: joflore
 author: MicrosoftGuyJFlo
@@ -125,6 +125,9 @@ The following device attributes can be used with the filter for devices conditio
 | trustType | Equals, NotEquals | A valid registered state for devices. Supported values are: AzureAD (used for Azure AD joined devices), ServerAD (used for Hybrid Azure AD joined devices), Workplace (used for Azure AD registered devices) | (device.trustType -notIn ‘ServerAD, Workplace’) |
 | extensionAttribute1-15 | Equals, NotEquals, StartsWith, NotStartsWith, EndsWith, NotEndsWith, Contains, NotContains, In, NotIn | extensionAttributes1-15 are attributes that customers can use for device objects. Customers can update any of the extensionAttributes1 through 15 with custom values and use them in the filter for devices condition in Conditional Access. Any string value can be used. | (device.extensionAttribute1 -eq ‘SAW’) |
 
+> [!NOTE] 
+> The `Contains` and the `NotContains` operators work differently depending on attribute types. For string attributes such as `operatingSystem` and `model`, the `Contains` operator indicates whether a specified substring occurs within the attribute. For string collection attributes such as `physicalIds` and `systemLabels`, the `Contains` operator indicates whether a specified string matches one of the whole strings in the collection.
+
 ## Policy behavior with filter for devices
 
 The filter for devices condition in Conditional Access evaluates policy based on device attributes of a registered device in Azure AD and hence it is important to understand under what circumstances the policy is applied or not applied. The table below illustrates the behavior when a filter for devices condition are configured. 

articles/active-directory/devices/overview.md

@@ -52,10 +52,6 @@ Devices that are Azure AD joined benefit from [SSO to your organization's on-pre
 
 Getting devices in to Azure AD can be done in a self-service manner or a controlled process managed by administrators.
 
-## License requirements
-
-[!INCLUDE [Active Directory P1 license](../../../includes/active-directory-p1-license.md)]
-
 ## Next steps
 
 - Learn more about [Azure AD registered devices](concept-azure-ad-register.md)

articles/active-directory/manage-apps/tenant-restrictions.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: app-mgmt
 ms.workload: identity
 ms.topic: conceptual
-ms.date: 12/3/2021
+ms.date: 12/6/2021
 ms.author: davidmu
 ms.reviewer: hirsin
 ms.collection: M365-identity-device-management
@@ -136,6 +136,10 @@ Outlook and Skype for Business clients that support modern authentication may st
 
 For Outlook on Windows, customers may choose to implement restrictions preventing end users from adding non-approved mail accounts to their profiles. For example, see the [Prevent adding non-default Exchange accounts](https://gpsearch.azurewebsites.net/default.aspx?ref=1) group policy setting.
 
+### Azure RMS and Office Message Encryption incompatibility
+
+The [Azure Rights Management Service](https://docs.microsoft.com/azure/information-protection/what-is-azure-rms) (RMS) and [Office Message Encryption](https://docs.microsoft.com/microsoft-365/compliance/ome) features are not compatible with tenant restrictions. These features rely on signing your users into other tenants in order to get decryption keys for the encrypted documents. Because tenant restrictions blocks access to other tenants, encrypted mail and documents sent to your users from untrusted tenants will not be accessible.
+
 ## Testing
 
 If you want to try out tenant restrictions before implementing it for your whole organization, you have two options: a host-based approach using a tool like Fiddler, or a staged rollout of proxy settings.

articles/api-management/api-management-howto-integrate-internal-vnet-appgateway.md

@@ -175,7 +175,6 @@ In the Product Catalog, always-available services are listed as "non-regional" s
 | Azure Advisor  | ![An icon that signifies this service is always available.](media/icon-always-available.svg) |
 | Azure Blueprints  | ![An icon that signifies this service is always available.](media/icon-always-available.svg) |
 | Azure Bot Services  | ![An icon that signifies this service is always available.](media/icon-always-available.svg) |
-| Azure Front Door  | ![An icon that signifies this service is always available.](media/icon-always-available.svg) |
 | Microsoft Defender for IoT  | ![An icon that signifies this service is always available.](media/icon-always-available.svg) |
 | Azure Front Door  | ![An icon that signifies this service is always available.](media/icon-always-available.svg) |
 | Azure Information Protection  | ![An icon that signifies this service is always available.](media/icon-always-available.svg) |

articles/availability-zones/az-region.md

@@ -292,8 +292,10 @@ It may take up to 15 minutes for the Private Link Scope to accept connections fr
 
 1. Check your on-premises DNS server(s) to verify it is either forwarding to Azure DNS or is configured with appropriate A records in your private link zone. These lookup commands should return private IP addresses in your Azure virtual network. If they resolve public IP addresses, double check your machine or server and network’s DNS configuration.
 
+    ```
     nslookup gbl.his.arc.azure.com
     nslookup agentserviceapi.guestconfiguration.azure.com
+    ```
 
 1. If you are having trouble onboarding a machine or server, confirm that you’ve added the Azure Active Directory and Azure Resource Manager service tags to your local network firewall. The agent needs to communicate with these services over the internet until private endpoints are available for these services.
 

articles/azure-arc/servers/private-link-security.md

@@ -166,7 +166,7 @@ See the complete regional availability of Functions on the [Azure web site](http
 |Brazil South| 100 | 20 |
 |Canada Central| 100 | 20 |
 |Central India| 100 | 20 |
-|Central US| 100 | 20 |
+|Central US| 100 | 40 |
 |China East 2| 100 | 20 |
 |China North 2| 100 | 20 |
 |East Asia| 100 | 20 |
@@ -180,7 +180,7 @@ See the complete regional availability of Functions on the [Azure web site](http
 |Korea Central| 100 | 20 |
 |Korea South| Not Available | 20 |
 |North Central US| 100 | 20 |
-|North Europe| 100 | 20 |
+|North Europe| 100 | 40 |
 |Norway East| 100 | 20 |
 |South Africa North| 100 | 20 |
 |South Central US| 100 | 20 |
@@ -195,7 +195,7 @@ See the complete regional availability of Functions on the [Azure web site](http
 |USGov Texas| 100 | Not Available |
 |USGov Virginia| 100 | 20 |
 |West Central US| 100 | 20 |
-|West Europe| 100 | 20 |
+|West Europe| 100 | 40 |
 |West India| 100 | 20 |
 |West US| 100 | 20 |
 |West US 2| 100 | 20 |

articles/azure-functions/functions-premium-plan.md

@@ -1,8 +1,8 @@
 ---
 title: Add a line layer to Android maps | Microsoft Azure Maps
 description: Learn how to add lines to maps. See examples that use the Azure Maps Android SDK to add line layers to maps and to customize lines with symbols and color gradients.
-author: anastasia-ms
-ms.author: v-stharr
+author: stevemunk
+ms.author: v-munksteve
 ms.date: 2/26/2021
 ms.topic: conceptual
 ms.service: azure-maps

articles/azure-maps/android-map-add-line-layer.md

@@ -1,8 +1,8 @@
 ---
 title: Handle map events in Android maps | Microsoft Azure Maps
 description: Learn which events are fired when users interact with maps. View a list of all supported map events. See how to use the Azure Maps Android SDK to handle events.
-author: anastasia-ms
-ms.author: v-stharr
+author: stevemunk
+ms.author: v-munksteve
 ms.date: 2/26/2021
 ms.topic: conceptual
 ms.service: azure-maps

articles/azure-maps/android-map-events.md

@@ -1,8 +1,8 @@
 ---
 title: React to Azure Maps events by using Event Grid 
 description: Find out how to react to Azure Maps events involving geofences. See how to listen to map events and how to use Event Grid to reroute events to event handlers.
-author: anastasia-ms
-ms.author: v-stharr
+author: stevemunk
+ms.author: v-munksteve
 ms.date: 07/16/2020
 ms.topic: conceptual
 ms.service: azure-maps